Product Security Manager - Mobile

AVEVA Denmark; Nashik District; On-site; INR 6,704,980 - 8,620,689; Full time

Benefits offered by this job

Competitive salary

Professional growth opportunities

Comprehensive benefits package

Job summary

AVEVA Denmark is seeking a Product Security Manager in Nashik District, India. The successful candidate will own the operational security for assigned RIB Software products and ensure compliance with secure development lifecycle requirements. Responsibilities include executing SDL, managing product security risks, and mentoring Product Security Engineers.

The ideal candidate will have 5+ years of experience in product security, strong communication skills, and a Bachelor's degree in Computer Science or related fields. Competitive salary and benefits offered.

Qualifications

• 5+ years experience in product security or application security.
• Proven ability to conduct security testing using SAST, DAST, and SCA tools.
• Strong understanding of SDL processes and security compliance frameworks.

Responsibilities

• Execute SDL requirements across the full product development lifecycle.
• Drive regular threat modelling, security reviews, and risk assessments for assigned products.
• Serve as primary contact for customer security discussions, assessments, and vulnerability disclosure.

Skills

Security testing using SAST, DAST, and SCA tools

Communication skills for technical and business stakeholders

Understanding of SDL processes

Ability to drive improvements in security culture

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

C#

Typescript

Java

JavaScript

Dart

C++

Python

Delphi

Job description

Job Title: Product Security Manager

Location: India

Job Type: Full-time

Job Summary: As a Product Security Manager you will own operational security for assigned RIB Software products, executing secure development lifecycle (SDL) requirements and ensuring compliance through coordinated security reviews and assessments. Serves as the primary security point of contact for product teams while collecting evidence required for compliance. This role requires a blend of hands-on technical expertise, security leadership, and the ability to work collaboratively across multidisciplinary teams including Security Architects, Product Owners, Developers, Quality Engineers, DevOps, Security Operations, and Governance. You will be a key driver in our mission to embed security into every stage of our products’ lifecycles, from initial design through to decommissioning and end-of-life.

Key Responsibilities

• Execute SDL requirements across the full product development lifecycle.
• Drive regular threat modelling, security reviews, and risk assessments for assigned products.
• Track and manage product-specific security issues through resolution, communicating status to leadership.
• Manage supply chain security risks for externally provided components used within the product.
• Collect and maintain compliance evidence for compliance requirements.
• Coordinate security activities with development teams through Security Architects and Product Owners in collaboration with our Vulnerability Assessment and Penetration Testing team.
• Identify and refine security requirements applicable to the product across its lifecycle.
• Serve as primary contact for customer security discussions, assessments, and vulnerability disclosure.
• Support security training and assessment initiatives to ensure product teams have demonstrated security expertise.
• Mentor assigned Product Security Engineers through collaborative review and guidance (when PSE support is available).
• Contribute to the security architecture and roadmap by advising on evolving threats and new technologies.

Qualifications and Experience

• 5+ years experience in product security or application security.
• Strong understanding of SDL processes and security compliance frameworks.
• Proven ability to conduct security testing using SAST, DAST, and SCA tools.
• Familiarity with one or more of C#, Typescript, Java, JavaScript, Dart, C++, Python, and/or Delphi.
• Experience with vulnerability management and risk assessment.
• Excellent communication skills for technical and business stakeholders.
• Project management experience with cross-functional teams.
• Ability to drive improvements in security culture.
• Demonstrated ability to work independently and provide guidance to technical colleagues.
• Bachelor's degree in Computer Science, Cybersecurity, or related field, or equivalent professional experience.

Preferred Qualifications

• CSSLP or similar secure development certification.
• Familiarity with cloud security best practices (preferably Azure).
• Experience with enterprise software security frameworks (SOC 2, ISO 27001).
• Experience with product or cloud security architecture.
• Background in SaaS or enterprise software environments.

Reports To: Product Security Lead

Benefits: We offer a competitive salary and benefits package, as well as opportunities for professional growth and development.

RIB may require all successful applicants to undergo and pass a comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third party personal data may involve additional background check criteria.

RIB is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business.